You will strengthen the ability to detect, investigate, and contain security incidents. You will design, test, and tune detection logic, analyse security telemetry across cloud and endpoint systems, investigate alerts, coordinate containment or remediation with engineering partners, build automation to speed investigations, and document incident findings and post-incident reviews.
Responsibilities
- Investigate security alerts across SIEM, EDR, and cloud security platforms
- Perform log analysis and coordinate containment or remediation with engineering partners
- Develop, test, and tune detection rules using query languages to improve signal quality and reduce false positives
- Correlate data from multiple telemetry sources to identify attack patterns and determine response actions
- Monitor emerging threats and update detection logic based on investigation findings and threat intelligence
- Build or refine SOAR playbooks and scripts to automate investigation and response workflows
- Document incidents and contribute to post-incident reviews with clear findings and recommended improvements
Requirements
- 2–4 years of experience in security operations, detection engineering, or incident response
- Experience analysing logs and tuning alerts within SIEMs, EDR platforms, and cloud security tools
- Experience writing detections using query languages (e.g., SQL-like, KQL, or similar)
- Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
- Ability to analyse security telemetry, identify patterns of malicious activity, and recommend improvements
- Clear written and verbal communication skills for documenting incidents and collaborating with technical teams
- Experience developing and deploying SOAR playbooks to automate detection and response workflows
- Familiarity with AWS, Okta, Kubernetes, and Google Workspace security monitoring tools
- Experience writing software to support detection and response tooling with a focus on secure, maintainable code
- Experience in building Agentic workflows and optimizing workflows with Generative AI
Benefits
- Performance-driven compensation with bonus programs
- Equity ownership
- 401(k) matching
- 100% paid health insurance for employees
- 90% health coverage for dependents
- Lifestyle wallet flexible benefits spending account
- Employer-paid life and disability insurance
- Fertility benefits
- Mental health benefits
- Paid time off including company holidays, sick time, and parental leave
- Catered meals and events
- Exceptional office experience